This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: DWxO5u0FWxew5zVxOL6EUwNzMSP6jnaB4aaG6wPwlPY=
Subject key identifier: 79:E1:DF:70:1D:C1:02:2E:03:A0:BB:8E:79:11:06:E5:B5:AF:8A:9A
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019C420FA457BA3467C8F8011A180065E5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0F1F
Signing time: Mon 09 Feb 2026 11:00:47 +0000
Manifest this update: Mon 09 Feb 2026 11:00:47 +0000
Manifest next update: Tue 10 Feb 2026 11:00:47 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: lzSA5gNoEjM5sTSKo2sFgwz/VfL5cKt9oLTIJXBTMew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a4:57:ba:34:67:c8:f8:01:1a:18:00:65:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Feb 9 11:00:47 2026 GMT
Not After : Feb 10 11:00:47 2026 GMT
Subject: CN=79e1df701dc1022e03a0bb8e791106e5b5af8a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:48:01:d6:b9:63:8d:d7:30:e8:03:c5:58:
4d:be:49:c8:1f:b3:39:4e:02:c6:91:c6:9a:9f:25:
35:42:90:6f:d9:a1:d0:b5:6e:82:d8:9f:6c:b2:ea:
7a:44:9d:b4:6e:4e:b4:94:68:2a:55:bc:05:1c:50:
ec:71:0e:98:4a:87:6b:31:a7:c8:47:eb:9a:08:2e:
e1:be:90:50:a0:d0:ae:28:96:5c:fa:35:c7:61:78:
c3:a0:50:ca:95:55:82:38:ac:4f:e2:ae:0e:38:c4:
0f:1f:f8:0c:70:0c:81:c5:89:e7:b0:3b:f0:a0:7f:
9b:79:d0:47:60:4a:e7:a0:b9:98:44:90:4a:a3:59:
1d:b9:52:aa:06:50:2d:a4:57:98:19:10:cc:8c:bd:
9e:f2:59:7f:61:e5:b8:17:1b:f0:32:a1:1f:dd:8d:
dc:b8:d7:75:97:be:27:a3:2b:95:e9:97:90:0a:a6:
5a:73:e4:fd:46:59:e6:1c:24:a7:5c:32:c6:61:7b:
fd:d6:7e:36:52:ea:45:74:bb:a8:86:5d:0f:fe:5e:
fe:15:6b:1b:11:4b:8b:01:74:68:13:24:55:71:f0:
15:a8:fd:7f:0d:29:b6:a9:fa:8d:bb:83:75:4b:6a:
63:bf:48:7b:c2:29:d1:05:00:35:e7:c6:b6:b8:08:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:DF:70:1D:C1:02:2E:03:A0:BB:8E:79:11:06:E5:B5:AF:8A:9A
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:ce:64:e7:ba:64:f4:5c:a3:0a:c6:14:b8:d4:67:49:05:
51:12:ad:9b:1d:4f:b5:3c:01:e9:2c:c0:6b:53:90:25:b2:e1:
30:ce:7c:2a:5c:bf:be:ad:56:13:ef:b1:78:08:2b:90:86:7a:
5d:50:5c:69:0b:31:01:a4:34:0c:2b:a2:54:37:c6:e8:eb:e4:
f7:9e:04:96:97:a2:7c:e7:70:73:68:b3:d0:2c:fc:92:86:21:
c3:b5:94:9d:ea:d4:fb:c3:84:05:7b:79:5f:8e:71:03:32:22:
ca:0c:71:de:00:90:52:b9:3c:78:39:ef:1d:7e:e5:70:96:e1:
26:57:0e:cc:06:6d:c0:f9:c4:4e:be:fa:f9:0d:33:07:0f:5a:
b1:63:fa:4f:b3:6e:94:80:94:98:32:54:75:0e:fd:dc:fb:da:
bc:ed:f4:06:af:21:8b:9f:68:31:ff:2a:16:5a:9f:3f:3c:bf:
24:97:f5:e0:02:6f:75:3b:25:e0:76:7b:b6:a3:fd:48:d6:28:
d5:c0:80:d7:0e:6f:48:5a:62:8d:ac:52:46:90:44:40:b9:fb:
7b:d9:e4:47:df:b6:10:25:44:f6:c7:e4:da:ad:ea:5a:fe:fe:
64:8e:e7:d3:1e:93:50:32:c7:d6:ff:94:0c:7a:79:d2:4e:c0:
7b:01:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:15 2026 by rpki-client